Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72385118-a579-3512-aed4-269c991627a3.roa
File:                     72385118-a579-3512-aed4-269c991627a3.roa (raw, json)
Hash identifier:          RZiwNCgg2VQPbzwf9wfmFd1oJRqqXpvNH10JwgBPqrY=
Subject key identifier:   47:F8:9A:32:C6:12:F4:87:F2:C1:8A:8A:E7:6D:83:02:62:D2:F4:A7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D492A42D24C44B0C378566000
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72385118-a579-3512-aed4-269c991627a3.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     16591
IP address blocks:        136.57.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:42:d2:4c:44:b0:c3:78:56:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=222a818c-ee0a-4498-ab1b-0fb2377349ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:8f:5b:75:95:a2:08:4f:1a:c3:86:d3:67:
                    cb:d4:69:33:07:9d:a7:9a:1f:cf:8d:e9:c4:62:f7:
                    3c:96:ec:30:8c:ea:57:0b:5e:2a:65:94:bf:a1:81:
                    8d:1a:29:a9:7f:59:40:ff:32:c6:8d:86:43:b9:c5:
                    30:53:93:ea:00:41:58:fe:5f:1b:4a:f9:19:ff:7a:
                    79:dc:cc:6a:7e:f6:f4:6e:29:de:c4:d2:79:6e:f2:
                    ce:2e:c1:3f:e5:a6:d6:bc:a7:3a:d9:cb:ea:7d:31:
                    99:b7:52:3b:48:9f:10:75:82:4f:af:2c:8a:99:f4:
                    1d:62:52:8f:0d:40:58:b5:a9:1e:84:2d:ce:61:6b:
                    07:0f:52:97:5d:96:37:5d:dc:17:dd:d3:45:09:06:
                    89:73:7b:83:1e:2b:fc:f9:17:46:32:29:c3:5e:08:
                    89:b4:6c:8d:89:af:8e:fd:d2:b0:a1:fd:63:a0:56:
                    a1:d1:1f:86:1b:0b:f4:f0:58:e3:39:a7:10:83:fd:
                    42:1b:67:7b:b9:6e:b2:39:d5:1d:3f:ea:cf:3f:3d:
                    2b:6f:99:fe:be:c9:01:7f:50:e3:f1:5f:b2:9f:d4:
                    61:0a:4d:42:b4:d5:c2:5c:48:c1:4a:55:d8:3b:d3:
                    04:72:50:6f:80:6d:04:a2:e9:64:0e:8c:fc:02:64:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F8:9A:32:C6:12:F4:87:F2:C1:8A:8A:E7:6D:83:02:62:D2:F4:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72385118-a579-3512-aed4-269c991627a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:b8:1a:52:b0:ba:c7:f7:03:84:1d:3d:3c:84:a3:a8:5e:
         b0:b1:f2:01:bb:06:ca:95:26:ed:68:3f:c4:10:96:4d:40:30:
         30:6f:8b:91:eb:bd:4b:a4:a7:40:75:31:54:83:73:eb:94:ed:
         d2:c8:8e:ae:65:58:da:02:85:5f:23:8b:32:26:9a:fa:0e:74:
         aa:ca:90:d4:29:d6:4d:ea:ca:4c:fd:81:70:9a:c3:8e:0f:26:
         ea:ff:bd:eb:79:84:b3:3b:be:14:04:6e:4c:c8:fe:c1:96:a2:
         07:0a:55:ec:a2:e9:04:bb:30:bc:73:28:67:3a:98:66:50:5e:
         db:c6:30:37:94:3d:d9:14:b4:59:b9:32:5a:b8:cb:9e:3f:95:
         db:51:91:3c:ba:38:d9:bf:83:bd:66:d4:45:c9:70:69:71:65:
         e4:38:78:1c:7e:d1:16:8f:36:49:c0:bb:28:82:4e:81:94:66:
         fe:4f:7e:bd:26:8c:91:15:4c:c3:0f:c8:34:21:bf:82:9e:9e:
         ce:33:6d:e4:31:58:bd:ed:a8:cf:ff:df:7c:76:61:51:f6:c9:
         34:cd:64:ab:d3:08:c3:9a:5c:23:f2:09:61:0d:5f:f5:27:ba:
         d7:60:c6:2d:7f:ef:19:3e:b6:e2:f7:3e:53:2f:54:8d:6d:1e:
         15:c6:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:59:09 2026 by rpki-client